INDIGO Identity and Access Management Service v1.9.0

What's Changed

• Show unrestricted scopes into well-known endpoint by @federicaagostini in #628
• Fix account lifecycle workflow by @rmiccoli in #746
• Administrators can disable a client by @garaimanoj in #747
• Change VOMS warning message when requesting a too long proxy by @federicaagostini in #756
• VO members can re-sign the AUP at any time by @garaimanoj in #757
• Add delete signature and sign on behalf by @enricovianello in #777
• Increase SAML response skew from 60 to 300 secs by @enricovianello in #780
• Multiplatform docker by @jacogasp in #761
• (Experimental*) Fix audit log for issued access tokens and add refresh token event by @federicaagostini in #774
• Fix authorization on SCIM me endpoint by @enricovianello in #764
• (Experimental*) Add attributes and managed groups to the SCIM user by @enricovianello in #764
• (Experimental*) Add authorities list to SCIM user by @enricovianello in #788
• Add last used property to clients by @darcato in #675
• Display how much time is left to AUP expiry by @garaimanoj in #783
• Allow to add nickname as attribute during a registration request by @federicaagostini in #789

* The introduced AUDIT messages and info to the SCIM user must be considered as experimental and they may be changed in next RC/releases in a backward incompatible way

New Contributors

• @garaimanoj made his first contribution in #757
• @jacogasp made his first contribution in #761

Notes

SCIM users response can now be extended in order to list also:

• user's attributes
• user's authorities
• user's managed groups

In order to include authorities and|or managed groups into SCIM users details you need to enable them through the following properties:

scim:
  include_authorities: true
  include_managed_groups: true

or through the environment variables:

IAM_SCIM_INCLUDE_AUTHORITIES=true
IAM_SCIM_INCLUDE_MANAGED_GROUPS=true

Attributes can be included into SCIM user response in the same way the labels are:

scim.include_attributes[0].name=attribute-name
scim.include_attributes[1].name=another-attribute-name

Full Changelog: v1.8.4...v1.9.0